AWS Route53 documentation change
Summary
Updated documentation for outbound endpoints, correcting references from 'inbound' to 'outbound' and adjusting security group requirements from inbound port 53 rules to outbound rules using the DNS query port.
Security assessment
Changes clarify configuration requirements but do not address a specific security vulnerability. The security group rule adjustment reflects proper outbound endpoint configuration rather than patching a security flaw.
Diff
diff --git a/Route53/latest/DeveloperGuide/outpost-resolver-add-outbound-endpoints.md b/Route53/latest/DeveloperGuide/outpost-resolver-add-outbound-endpoints.md index d3d7cdbfa..d7c0058df 100644 --- a//Route53/latest/DeveloperGuide/outpost-resolver-add-outbound-endpoints.md +++ b//Route53/latest/DeveloperGuide/outpost-resolver-add-outbound-endpoints.md @@ -23 +23 @@ After you have opted in and configured a Route 53 Resolver, you can also add bot - 6. On the **Create outbound endpoint** page, enter the applicable values. For more information, see [Values that you specify when you create or edit inbound endpoints on an Outpost](./outpost-resolver-add-inbound-endpoints.html#resolver-forwarding-inbound-queries-values-outpost). + 6. On the **Create outbound endpoint** page, enter the applicable values. For more information, see Values that you specify when you create or edit outbound endpoints in an AWS Outposts. @@ -32 +32 @@ After you have opted in and configured a Route 53 Resolver, you can also add bot -When you create or edit an inbound endpoint, you specify the following values: +When you create or edit an outbound endpoint, you specify the following values: @@ -42 +42 @@ If you are creating the endpoint for a Resolver on an AWS Outposts VPC, this is -A friendly name that lets you easily find an inbound endpoint on the dashboard. +A friendly name that lets you easily find an outbound endpoint on the dashboard. @@ -47 +47 @@ A friendly name that lets you easily find an inbound endpoint on the dashboard. -All inbound DNS queries from your network pass through this VPC on the way to Resolver. +All outbound DNS queries from your VPC pass through this VPC on the way to your network. @@ -52 +52 @@ All inbound DNS queries from your network pass through this VPC on the way to Re -The ID of one or more security groups that you want to use to control access to this VPC. The security group that you specify must include one or more inbound rules. Inbound rules must allow TCP and UDP access on port 53. You can't change this value after you create the endpoint. +The ID of one or more security groups that you want to use to control access to this VPC. The security group that you specify must include one or more outbound rules. Outbound rules must allow TCP and UDP access on the port that you're using for DNS queries on your network. You can't change this value after you create the endpoint. @@ -75 +75 @@ For each IP address, specify the following values. Each IP address must be in an -The Availability Zone that you want DNS queries to pass through on the way to your VPC. The Availability Zone that you specify must be configured with a subnet. +The Availability Zone that you want DNS queries to pass through on the way from your VPC. The Availability Zone that you specify must be configured with a subnet. @@ -80 +80 @@ The Availability Zone that you want DNS queries to pass through on the way to yo -The subnet that contains the IP address that you want to forward DNS queries to. The subnet must have an available IP address. +The subnet that contains the IP address that you want to forward DNS queries from. The subnet must have an available IP address.